Authorities make arrests linked to worm spate

US police have arrested two people in Turkey and Morocco under suspicion of involvement in the recent spate of computer worms, according to Microsoft. The worms known as Zotob, Rbot and Mytob, targeted the software giant's Windows 2000 operating system.

Microsoft worked in conjunction with the Turkish and Moroccan authorities and the US Federal Bureau of Investigation (FBI), according to a release from the company. The software vendor, through a division it created two years ago to investigate cybercrime, provided the FBI with technical information and analytical support that was then shared with Turkish and Moroccan police.

Law enforcement officers in Rabat, Morocco, and in Adana and Ankara in Turkey, arrested the alleged distributors of the worms -- Atilla Ekici, 21, of Turkey and Farid Essebar, 18, of Morocco -- Thursday, 12 days after the release of the first Zotob worm, Microsoft and FBI representatives said. Ekici went under the code name of "Coder" and Essebar used the code name "Diabl0," said Louis M. Reigel III, assistant director of the FBI Cyber Division, in a conference call Friday.

Ekici apparently paid Essebar a sum of money to write the worms, but was not involved in their creation himself, Reigel said. "We believe that there was financial gain on the part of the Moroccan in the relationship," he said.

Originally investigators believed there might be two Moroccan individuals involved in the crime, but that proved not to be the case, he said. At this time, investigators do not think Ekici and Essebar were involved in creating any of the worms' variants, but the investigation is ongoing and further arrests or charges will be made if needed, he said.

The FBI is not currently seeking extradition of the suspects to the US, but is working with local authorities in Turkey and Morocco to prosecute the individuals, he said. Though the two countries' cybercrime laws are not as "advanced" as those in the US, the suspects will be charged with appropriate crimes in their home countries, Reigel said.

The suspects may be charged with violating consumer protection and antifraud laws, according to Microsoft Senior Vice President and General Counsel Brad Smith.

The investigation to apprehend the creator of the Mytob worm, which was released in February, began in late March, but the investigation that eventually led to the arrests of Ekici and Essebar began in earnest after the Zotob worm was released two weeks ago, Reigel said. Investigators received no major tip-off but used information from Microsoft that monitored the behavior of the worms to track them to their origin, he said.

The worms exploited vulnerabilities in the Windows 2000 operating system to infect computers running the software with malware that shifted complete control over the PCs to the hackers who launched the attacks.

Fortunately, the worms don't appear to have caused as much damage as previous hacker attacks. Microsoft has since issued security patches to fix the holes in its operating system.

Microsoft's Smith attributed the fact that relatively little damage was caused by the worms to two things: consumers are becoming more savvy to threats and taking more precautions to shield their software from viruses, and Microsoft is making good on its commitment to create more secure products.

Smith also lauded the swiftness with which Microsoft and the FBI identified the suspects with the arrests coming less than two weeks after Zotob was released.

"Clearly I think this kind of public and private collaboration [to fight cybercrime] is a model that is successful here," he said.

Join the newsletter!


Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.
Show Comments

Father’s Day Gift Guide

Brand Post

Most Popular Reviews

Latest Articles


PCW Evaluation Team

Luke Hill


I need power and lots of it. As a Front End Web developer anything less just won’t cut it which is why the MSI GT75 is an outstanding laptop for me. It’s a sleek and futuristic looking, high quality, beast that has a touch of sci-fi flare about it.

Emily Tyson

MSI GE63 Raider

If you’re looking to invest in your next work horse laptop for work or home use, you can’t go wrong with the MSI GE63.

Laura Johnston

MSI GS65 Stealth Thin

If you can afford the price tag, it is well worth the money. It out performs any other laptop I have tried for gaming, and the transportable design and incredible display also make it ideal for work.

Andrew Teoh

Brother MFC-L9570CDW Multifunction Printer

Touch screen visibility and operation was great and easy to navigate. Each menu and sub-menu was in an understandable order and category

Louise Coady

Brother MFC-L9570CDW Multifunction Printer

The printer was convenient, produced clear and vibrant images and was very easy to use

Edwina Hargreaves

WD My Cloud Home

I would recommend this device for families and small businesses who want one safe place to store all their important digital content and a way to easily share it with friends, family, business partners, or customers.

Featured Content

Product Launch Showcase

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?